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This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1 . (Currently Amended) A method for maintaining the security of data displayed on 
a display for a computing system singl e comput e r comprising a secured execution environment 
and a second execution environment, the method comprising: 

operating, on the computing system single computer , the second execution environment 
concurrently with the secured execution environment , the socurod oxocution onvironmont 
comprising a n e xus and the second execution environment comprising a different operating 
system, wherein th e n e xus and diff e r e nt op e rating syst e m shar e a window manag e r ; 

storing an imago of at least one displaying a graphical user interface element of said 
noxus secured execution environment , said at least one noxus graphical user interface element 
being associated with a first process running on said secured execution environment , wherein a 
shadow graphical user interface clement corresponding to the araphical user interface element is 
maintained bv the second execution environment, t^tftd 

displaying said a noxus graphical user intorfaco olomont on said display, such that no part 

of said n e xus graphical us e r int e rfac e e l e m e nt is obscur e d by a graphical us e r int e rfac e e l e m e nt 
associat e d with said diff e r e nt op e rating syst e m of said s e cond e x e cution e nvironm e nt on said 

2. (Currently Amended) The method of claim 1 , wherein displaying said noxus 
graphical user interface element comprises: 

ensuring that said nexus graphical user interface element contains no areas of 
transparency. 

3 . (Currently Amended) The method of claim 1 , wherein displaying said n e xus 

graphical user interface element on a display comprises displaying said nexus graphical user 
interface element such that no part of said noxus graphical user interface element is obscured by 
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a graphical user interface element associated with a second process running on said secured 
execution environment. 

4. (Original) The method of claim 1 , further comprising: 

displaying only said graphical user interface elements on said display upon receipt of a 
user secure display indication. 

5. (Currently Amended) A method for maintaining the security of data displayed on 
a display for a computing system single comput e r comprising a secured execution environment 
and a second execution environment, the method comprising: 

operating, on the computing system single computer , the second execution environment 
concurrently with the secured execution environmen t, the secured execution environment 
comprising a n e xus and th e s e cond e x e cution e nvironm e nt comprising a diff e r e nt op e rating 
system, wh e r e in th e n e xus and diff e r e nt op e rating syst e m shar e a window manag e r ; 

storing a nexus u ser secret associated with said nexus of said secured execution 
environment; and 

displaying a graphical user interface element of said n e xus secured execution 
environment comprising said n e xus u ser secret on said display, where said n e xus graphical user 
interface element is associated with a process running on said secured execution environment^ 
wherein a shadow graphical user interface element corresponding to the graphical user interface 
element is maintained bv the second execution environment . 

6. (Previously Presented) The method of claim 5, wherein displaying a nexus 
graphical user interface element comprising said nexus-user secret on a display comprises: 

accepting a user nexus-user secret display indication; and 
displaying said nexus-user secret. 
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7. (Currently Amended) A method for maintaining the security of data displayed on 
a display for a computing system single computer comprising a secured execution environment 
and a second execution environment, the method comprising: 

operating, on the computing system single computer , the second execution environment 
concurrently with the secured execution environment, the secured execution environment 
comprising a nexus and the second execution environment comprising a different operating 
syste m, wherein the nexus and different operating system share a window manager ; 

accepting at least two graphical data elements of said nexus, each associated with a 
process running on said secured execution environment, for display on said display; and 

displaying at least two graphical user interface elements of said nexus, each of said nexus 
graphical user interface elements comprising one of said nexus graphical data elements and a 
common graphical user interface decoratio n, wherein for each of the at least two nexus graphical 
user interface elements the second execution environment maintains a corresponding shadow 
graphical user interface element . 

8. (Original) The method of claim 7, where said common graphical user interface 
decoration comprises a colored border. 

9. (Original) The method of claim 7, where said common graphical user interface 
decoration comprises one or more randomly selected images. 

10. (Original) The method of claim 7, further comprising: 

changing said common graphical user interface decoration when a set time period 
elapses. 

1 1 . (Original) The method of claim 7, further comprising: 

changing said common graphical user interface decoration when a user decoration change 
indication is received. 
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12. (Currently Amended) A method for maintaining the security of data displayed on 
a display for a computing system single computer comprising a secured execution environment 
and a second execution environment, the method comprising: 

operating, on the computing system single computer , the second execution environment 
concurrently with the secured execution environment, the secured execution environment 
comprising a nexus and the second execution environment comprising a different operating 
syste m, whoroin tho noxus and diflForont operating system share a window manager ; 

storing public title information and private title information for a graphical user interface 
element of said nexus, the nexus graphical user interface element being associated with a process 
running on said secured execution environmen t, wherein a shadow graphical user interface 
element corresponding to the nexus graphical user interface element is maintained by the second 
execution environment : 

using said private title information for window management functions on said secured 
execution environment when displaying said nexus graphical user interface element; and 

providing said public title information for use in said second execution environment. 

1 3 . (Currently Amended) The method of claim 1 2, the window manag e r second 
execution environment comprising a host window manage r, whoro said second oxooution 
environment includes said host window manager for managing graphical user interface elements 
on said display, where said host window manager creates [[a]] the shadow graphical user 
interface element for said nexus graphical user interface element, and where said public title is 
used by said host window manager. 

14. (Original) The method of claim 12, further comprising: 

displaying each of said nexus graphical user interface element on said display completely 
on a display, such that no part of said nexus graphical user interface element is obscured by a 
graphical user interface element associated with said second execution environment on said 
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display, where each of said nexus graphical user interface elements comprises a common 
graphical user interface decoration. 

storing a nexus-user secret associated with said secured execution environment; and 
displaying a nexus-user secret graphical user interface element comprising said nexus- 
user secret on said display. 

15. (Currently Amended) A computer-readable storage medium containing computer 
executable instructions to maintain the security of data displayed on a display for a computing 
system singl e computer comprising a secured execution environment and a second execution 
environment, the computer-executable instructions to perform acts comprising: 

operating, on the computing system single computer , the second execution environment 
concurrently with the secured execution environmen t, tho soourod oxooution onvironmont 
comprising a nexus and th e s e cond e x e cution e nvironm e nt comprising a diff e r e nt op e rating 
system, wherein the n e xus and diff e rent operating system shar e a window manag e r ; 

storing an imago of at least one displaying a graphical user interface element of said 
noxu8 secured execution environment , said at least one noxus graphical user interface element 
being associated with a first process running on said secured execution environmen t, wherein a 
shadow graphical user interface element corresponding to the graphical user interface element is 
maintained by the second execution environment, -i-aad 

displaying said a noxus graphical user intorfaoo olomont on said display, such that no part 

of said nexus graphical user interface element is obscured by a graphical user interface element 
associat e d with said different operating system of said second execution environment on said 

16. (Currently Amended) The computer-readable storage medium of claim 15, where 
said act of displaying said n e xus graphical user interface element comprises: 

ensuring that said n e xus graphical user interface element contains no areas of 
transparency. 
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17. (Currently Amended) The computer-readable storage medium of claim 15, where 
said act of displaying said nexus graphical user interface element on a display comprises 
displaying said nexus graphical user interface element such that no part of said noxus graphical 
user interface element is obscured by a graphical user interface element associated with a second 
process running on said secured execution environment. 

18. (Previously Presented) The computer-readable storage medium of claim 15, 
wherein the computer-executable instructions are adapted to perform acts further comprising: 

displaying only said graphical user interface elements on said display upon receipt 
of a user secure display indication. 

1 9. (Currently Amended) A computer-readable storage medium containing computer 
executable instructions to maintain the security of data displayed on a display for a computing 
system single computer comprising a secured execution environment and a second execution 
environment, the computer-executable instructions to perform acts comprising: 

operating, on the computing svstem singl e comput e r , the second execution environment 
concurrently with the secured execution environmen t, th e s e cur e d e x e cution e nvironm e nt 
comprising a noxus and tho second oxooution onvironmont comprising a difforont operating 
system, whoroin the noxus and diflForont operating system share a window manager ; 

storing a nexus u ser secret associated with said n e xus of said secured execution 
environment; and 

displaying a graphical user interface element of said noxus secured execution 
environment comprising said noxus u ser secret on said display, where said noxus graphical user 
interface element is associated with a process running on said secured execution environment^ 
wherein a shadow graphical user interface element corresponding to the graphical user interface 
element is maintained bv the second execution environment . 
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20. (Previously Presented) The computer-readable storage medium of claim 19, 
where said act of displaying a nexus graphical user interface element comprising said nexus-user 
secret on a display comprises: 

accepting a user nexus-user secret display indication; and 
displaying said nexus-user secret. 

21 . (Currently Amended) A computer-readable storage medium containing computer 
executable instructions to maintain the security of data displayed on a display for a computing 
system singl e computer comprising a secured execution environment and a second execution 
environment, the computer-executable instructions to perform acts comprising: 

operating, on the computing system single computer , the second execution environment 
concurrently with the secured execution environment, the secured execution environment 
comprising a nexus and the second execution environment comprising a different operating 
syste m, wherein the nexus and different op e rating syst e m shar e a window manag e r ; 

accepting at least two graphical data elements of said nexus, each associated with a 
process running on said secured execution environment, for display on said display; and 

displaying at least two graphical user interface elements of said nexus, each of said nexus 
graphical user interface elements comprising one of said nexus graphical data elements and a 
common graphical user interface decoratio n, wherein for each of the at least two nexus graphical 
user interface elements the second execution environment maintains a corresponding shadow 
graphical user interface element . 

22. (Previously Presented) The computer-readable storage medium of claim 21, 
where said common graphical user interface decoration comprises a colored border. 

23 . (Previously Presented) The computer-readable storage medium of claim 2 1 , 
where said common graphical user interface decoration comprises one or more randomly 
selected images. 
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24. (Previously Presented) The computer-readable storage medium of claim 21, 
wherein the computer-executable instructions are adapted to perform acts further comprising: 

changing said common graphical user interface decoration when a set time period 
elapses. 

25 . (Previously Presented) The computer-readable storage medium of claim 2 1 , 
wherein the computer-executable instructions are adapted to perform acts further comprising: 

changing said common graphical user interface decoration when a user decoration change 
indication is received. 

26. (Currently Amended) A computer-readable storage medium containing computer 
executable instructions to maintain the security of data displayed on a display for a computing 
svstem single computer comprising a secured execution environment and a second execution 
environment, the computer-executable instructions to perform acts comprising: 

operating, on the computing system single computer , the second execution environment 
concurrently with the secured execution environment, the secured execution environment 
comprising a nexus and the second execution environment comprising a different operating 
syste m, whoroin the noxus and difforont operating system share a window manager ; 

storing public title information and a private title information for a graphical user 
interface element of said nexus, the nexus graphical user interface element being associated with 
a process running on said secured execution environmen t, wherein a shadow graphical user 
interface element corresponding to the nexus graphical user interface element is maintained by 
the second execution environment : 

using said private title information for window management functions on said secured 
execution environment when displaying said nexus graphical user interface element; and 

providing said public title information for use in said second execution environment. 
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27. (Currently Amended) The computer-readable storage medium of claim 26, the 
window manager second execution environment comprising a host window manage r, where said 
second execution onvironmont includes said host window manager for managing graphical user 
interface elements on said display, where said host window manager creates [[a]] the shadow 
graphical user interface element for said nexus graphical user interface element, and where said 
public title is used by said host window manager. 

28. (Previously Presented) The computer-readable storage medium of claim 26, 
wherein the computer-executable instructions are adapted to perform acts further comprising: 

displaying said nexus graphical user interface element on said display, such that no part 
of said nexus graphical user interface element is obscured by a graphical user interface element 
associated with said second execution environment on said display, where said nexus graphical 
user interface element comprises a common graphical user interface decoration; 

storing a nexus-user secret associated with said secured execution environment; and 
displaying a nexus-user secret graphical user interface element comprising said nexus- 
user secret on said display. 

29. (Currently Amended) A computing system singl e comput e r for maintaining the 
security of data displayed on a display, the computing system single computer comprising: 

a secured execution environment and a second execution environment operating 
concurrently on the computing svstem singl e comput e r , the secured execution environment 
comprising a nexus and the second execution environment comprising a different operating 
system; 

first storage in said secured execution environment for storing private title information 
for a graphical user interface element of said nexus, the nexus graphical user interface element 
being associated with a process running on said secured execution environment, and a nexus-user 
secret associated with said secured execution environmen t, wherein a shadow graphical user 
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interface element corresponding to the nexus graphical user interface element is maintained by 
the second execution environment ; 

second storage in said second execution environment for storing public title information 
for said nexus graphical user interface element; and 

a trusted window manager for displaying said nexus graphical user interface element on 
said display, such that no part of said nexus graphical user interface element is obscured by a 
graphical user interface element associated with said second execution environment on said 
display, where said nexus graphical user interface element comprises a common graphical user 
interface decoration and said private title informatio n, wh e r e in th e n e xus and diff e r e nt op e rating 
syst e m shar e th e trusted window manager . 

30. (Currently Amended) The computing system single computer of claim 29, where 
said trusted window manager displays a nexus-user secret graphical user interface element 
comprising said nexus-user secret on said display. 
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